Time Difference

Mike Kercher mike at CAMAROSS.NET
Mon Nov 1 21:11:23 GMT 2004


Matt Kettler wrote:
> Hmm, that's quite strange.. However, consider this fact:
>
> Neither MailScanner nor sendmail creates those timestamps.... they
> are created by syslogd.
>
>  From the looks of it, your local system clock hiccuped by 2 hours
> and went back again, but MailScanner and sendmail have nothing to do
> with this. They can't.
>
> Do you have a NTP client running on that box that may have gone awry?
>
>
>
>
> At 03:27 PM 11/1/2004, Mike Kercher wrote:
>> Oct 31 07:52:33 www MailScanner[8666]: SophosSAVI::INFECTED::
>> W32/Bagle-AU:: ./i9VFqOg14300/price.scr
>>
>> Oct 31 07:52:34 www MailScanner[8666]: Virus Scanning: SophosSAVI
>> found 1 infections
>>
>> Oct 31 07:52:34 www MailScanner[8666]: Infected message i9VFqOg14300
>> came from 70.113.52.139
>>
>> Oct 31 07:52:34 www MailScanner[8666]: Virus Scanning: Found 1
>> viruses
>>
>> Oct 31 07:52:34 www MailScanner[8666]: Filename Checks: Possible
>> virus hidden in a screensaver (i9VFqOg14300 price.scr)
>>
>> Oct 31 07:52:34 www MailScanner[8666]: Other Checks: Found 1 problems
>>
>> Oct 31 09:52:34 www sendmail[14306]: i9VFqY514306: from=postmaster,
>> size=1036, class=0, nrcpts=1,
>> msgid=<200410311552.i9VFqY514306 at www.abby.com>, relay=root at localhost
>>
>> Oct 31 07:52:34 www MailScanner[8666]: Notices: Warned about 1
>> messages
>>
>> The time that sendmail stamps in the log is correct.  The ti
>

This happens consistently...day after day.  It's not a one time deal.  The
clock syncs regularly with time.nist.gov and the hwclock is sync'd to the
system time.  The system time is also correct.  It's only the log entries by
MailScanner that are 2 hours behind.  Is there a timezone that perl
recognizes independent of the system time?

Mike

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).




More information about the MailScanner mailing list